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The following listing of claims replaces all prior versions and listing of claims in the application. 
LISTING OF CLAIMS 

1 - 18. ( previously cancelled) . 

(previously added and now amended) A system for ciphering a packet in_a.data [fer 
ssion] atrflflm received by a communication device, ^id system comprising: 

r fj r » rTTTT1 rn^™™ti'nn port for receivy ft said data stream: 
a second co mmunication port for transrr'""" ft "p^ri data stream associated 

frit* 1 nn M ^^f 1 ^' 

a memory device having 
a memory buffer; 

a first access port connected to said memory buffer; and 
a second access port connected to said memory buffer; [and] 
a data processing processor connected to said first r.nrmvmnicatiori port, said 
secnrtri crmiim™™fl'™ pnTfifrid said first access port via a first bus; 




a ciphering processor connected to said second access port via a second bus, 
wherein said first access port and said second access port each provide [mutually 
independent] access to said memory buffer; [s aid s e cond bun io not connected to said first bra ] 
said data processing processor is adapted to receive said^data [ and provide oaid datoto ] Sgum 

from said first ^miiniifflrlrm porf throuph Said first PUS, to identify H St** ^ » end pf 3*4 

pj^lrrt , to store « fn« flMnrintwd, with said packet in said memory^buffer [«*v«] Jfcmi|gfc said first 

t«T Bn< | m ^avh ffft.fi f-lphHrpd rlata from memory buffer thro ugh said first bus for 

\ 

^mission tbrniioh said second communication port: and said ciphering processor is adapted to 
retrieve said [date] §k from said memory buffer over said second bus, tQ generate sajfLciphered 
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d\a teajrom said [date] ®§Jg, generate integrity check information for said ciphered data 
sjjjk.using gojtigts^said [data] £k and lpj>rovide said ciphered data steejm to said memory 
buffer [Wf] through said second bus. 

20. (previously added and now amended) The system for ciphering a P^ket in a.datajfegani 
as claimed in claun 19, wherein said ciphering processor includes an encryption module for 
generating said ciphered datajjrsajn and a hashing module for generating said integrity check 
information. 

2 1 . (previously added knd now amended) The system for ciphering ^packet in a data.gteapj 
as claimed in claim 19, wherein said ciphering processor includes an encryption module for 
generating said ciphered data s^gaand a [ moooage digesting ] module for generating said 
integrity check information. 

22. (prcviouily nddrri nrtri nmr im-r^) ■y*"* f™- riphwrinp a packet in a data stream 
as claimed in claim 20, wherein said encryption module includes a DBS encryption module for 
performing one of DES and triple-DES encryption. 

23 . (previously added and now amended) The^system for ciphering a packetin a data_steeam 
as claimed in claim 20, wherein said hashing module^includes a HMAC hashing module for 
encoding said integrity check information within said ciphered datajteejm.. 

24 (previously added and now amended) The systemfor ciphering a packet in a datajflream 

\ 

as claimed in claim 19, wherein said memory buffer comprises dual port random access memory. 

25. (previously added and now amendfed) The system for ciphering a packet in a datajsftsam 
as claimed in claim 19, wherein said datQcocessing processor comprises a security module, 
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tfl flid o o curity i^dulo rotrievoo] adapted to retrieve a security context from memory [r*aki 
security oontoxt unedpaQiif in generating said ciphered dataj&gjm. 

26. (previously added andvnow amended) The system for ciphering a packet in ^datajSgam 
as claimed in claim 25, where^d security module determines a security context relating to at 



least one of a source of said data 



and a destination for said ciphered datajjrjajg and 

\ 




stores said security context in said memory^buffer, said security context stored being accessible 
by said ciphering processor. 

7. (previously added and now amended) The system for ciphering ^M^M&M^^m 
as claimed in claim 26, wherein said data processing processor comprises a security address 
module\said security address module stores an address associated with said security context in 
said memory buffer, said address based on said at least one of said source of said data steganLand 
said destinatio\for said ciphered datajjjejga. 

28. (previously added and now amended) The system for ciphering a packet m a data stream 
as claimed in claim 25, wherein said security module provides an indication to said data 
processing processor when Security context is not present in said memory buffer. 



29. (previously added and nov^amended) The system for ciphering a packet in a data stream 
as claimed in claim 19, wherein said data processing processor operates asynchronously to said 
ciphering processor. 



30. (previously added and now amended) The system for ciphering a packet in a data stream 
as claimed in claim 29, wherein said data processing processor is clocked by a first clock source, 
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said ciphering processor is clocked by a second clock source and said first clock source is 
asynchronous to satd^second clock source. 

31. (cancelled) 

32. (previouslyWded and now amended) The system for ciphering a packet hq a data^sftgam, 
claimed in claim ft4-]3JL wherein said data s&ejrnjreceived at said first communications port 

comprises fragments df a packet, said data processing processor stores said fragments in said 
memory buffer to assemble said packet and said ciphering processor generates said ciphered data 
stream from said assembled packet. 

33. (previously added arid now amended) The system for ciphering ? pagke^ in a data stream 
as claimed in claim 32, whereto said system is disposed at a gateway between a private network 
and a public network in a secure virtual private network, said first communications port is 
connected to one of said private network and said public network and said second 
communications port is connected to another one of said private network and said public 
network. 

^34. (new) A method for ciphering a packet in a data stream received by a communication 
device having a first communication port for receiving said data stream, a second 
communication port for traiisrmtting a ciphered data stream associated with said data stream, a 
memory device includmg\ memory buffer and a first and a second access ports connected to 
said memory buffer, said communication device further having a data processing processor 
connected to said first commumcation port, said second communication port and said access port 
via a first bus and a ciphering processor connected to second access port via a second bus, said 
method comprising: \ 
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refceiving said data stream from said first communication port for processing by said data 
processing processor; 

identifying a start and an end of said packet by said data processing processor; 
storing aVle associated with said packet in said memory buffer by said data processing 
processor through said first bus; 

retrieving sai^ file from said memory buffer by said ciphering processor over said second 
bus; 

generating said ciWred data stream from said file by said ciphering processor; 
generating integrityVheck information for said ciphered data stream using contents of 
said file by said cipheW processor; and 

providing said ciphered (lata stream to said second communication port. 



35. (new) The method for ciphering a packet in a data stream as claimed in claim 34, said 
method further comprising, 

retrieving a security context from rnemory for use in generating said ciphered data 

stream; 

deteimining a security context relating to at least one of a source of said data sttejgLand 
a destination for said ciphered data streamjtand 

storing said security context in said memory buffer, said security context stored being 
accessible by said ciphering processor. 
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